General
- Target 2026-07-05_9f0ef51ce2b98dfaa88ffcdb56bfc763_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260705-tfmbksdw41
- SHA256 ae5ff33bf15189d65e28ad6b102149a1847c18012fa9c7be4456b2b3f0a5cdbd
- MD5 9f0ef51ce2b98dfaa88ffcdb56bfc763
- SHA1 b981c8103336755fa0feda465271d03237e86041
- SHA512 65eedc414f1a73f82978f6d8eaa7aa49457e808528c2804dff32501d32210cd74a76b8c474376b64506c9a7478c507473341901f1df13f39ffb033acd5c63d58
- SSDEEP 24576:mxWVeyRY2yLmL4O8b8ITDnlxsqEkWqGzC:m8Y+4O8b8ITDnl4qGG
- TLSH T1DF550822F2D4C024E5B72F30497A8EB4E637BC1169B4869B324C3B4D5F717A1ED26726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_9f0ef51ce2b98dfaa88ffcdb56bfc763_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_9f0ef51ce2b98dfaa88ffcdb56bfc763_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_9f0ef51ce2b98dfaa88ffcdb56bfc763_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 ae5ff33bf15189d65e28ad6b102149a1847c18012fa9c7be4456b2b3f0a5cdbd
- MD5 9f0ef51ce2b98dfaa88ffcdb56bfc763
- SHA1 b981c8103336755fa0feda465271d03237e86041
- SHA512 65eedc414f1a73f82978f6d8eaa7aa49457e808528c2804dff32501d32210cd74a76b8c474376b64506c9a7478c507473341901f1df13f39ffb033acd5c63d58
- SSDEEP 24576:mxWVeyRY2yLmL4O8b8ITDnlxsqEkWqGzC:m8Y+4O8b8ITDnl4qGG
- TLSH T1DF550822F2D4C024E5B72F30497A8EB4E637BC1169B4869B324C3B4D5F717A1ED26726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory